Episodes
-
PHP2Shell Causes Hell on a Friday 2026-10-26
The BHIS crew breaks down PHP2Shell, the challenges of emergency patching, and how AI-assisted vulnerability discovery is changing incident response. They discuss weak eMudhra certificate keys, Node2Shell and Brotli vulnerabilities, and security issues involving Plex, LiteLLM, GitLab, Broadcom...
-
ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19
The BHIS crew examines the ConnectWise/SkyKick compromise, its implications for Microsoft Entra tenants, and the consequences for MSPs and their customers. They discuss privileged application access, attacker persistence, and why clear incident communication matters. Other stories include the…
more -
Russian Data Centers Bombed - 2026-10-12
The BHIS crew discusses MonsterCloud’s ransomware decryption fraud, a Canadian cybersecurity executive’s arrest, and strikes on Russian data centers linked to a sharp decline in Yandex bot traffic. AI reverse engineering takes center stage as the team explores game recreations, commercial…
more -
Live From WWHF Deadwood '26 - 2026-10-07
Recorded live at Wild West Hackin’ Fest, the BHIS crew debates AI agent sandbox escapes, OpenAI’s frontier model decisions, and accountability for the Hugging Face hack. Other stories include the dismissal of OpenAI safety researchers, the FBI–Accenture breach, ShinyHunters arrests, Oracle’s...
-
AI Agents Go Rogue: Where’s the Accountability? 2026-09-28
This week, the BHIS crew starts with an Nvidia-branded trailer stolen for its presumed GPUs—only to turn out to be full of sand. They then examine reports of OpenAI agents accessing Australian and U.S. government sites, the unanswered questions about what happened, and Nvidia’s proposed agent...
-
Google’s Gemini Agent Escapes Containment - 2026-09-21
This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak...
-
World Leaders Reject Calls to Slow Down AI Development - 2026-09-14
This week, the team examines AI agents targeting RubyGems, Anthropic’s warnings about dangerous AI misuse, human review of ChatGPT conversations, predictive policing, and LG smart-TV privacy. They also cover passkey-themed phishing, ScreenConnect abuse, Microsoft Defender patch bypasses, and...
-
Anthropic Warns Users of Infostealer Abuse - 2026-09-08
AI agents take center stage as the team examines OpenAI models using a German forum for private communications, Anthropic’s response to a compromised Claude account, new model releases, and the growing demand for Apple hardware to train computer-using agents. The discussion also covers the sale…
more -
South Korea Offers Free AI Services – 2026-08-31
This episode of BHIS - Talkin' Bout [infosec] News covers South Korea’s free government AI services, new efforts to secure the U.S. power grid from foreign-made components, and the use of SS7 and fitness-tracking data in military operations. The panel also discusses the FBI’s disruption of…
more -
Using AI to Debug the Linux Kernel - 2026-08-24
This episode examines the alleged GTA 6 leak and Rockstar’s efforts to identify the leaker, a Flock Safety critic’s unconventional response to being barred from its conference, and Linus Torvalds’ use of AI to debug Linux. The discussion also covers ShinyHunters targeting ReliaQuest, “security...
-
White House Announces "Digital Letters of Marque" - 2026-08-17
This episode covers computer hardware shortages and chip-manufacturing bottlenecks, digital “letters of marque” for private cyber operations, and New Orleans’ use of AI for 911 calls. The panel also examines the LiteLLM supply-chain attack, Roblox safety concerns, attacks on on-premises…
more -
OpenClaw Cancels a Stranger's Gym Reservation - 2026-08-10
This episode explores an AI agent that canceled someone else’s gym reservation, the growing offensive and defensive roles of AI, and a sharp rise in ransomware attacks. The panel also discusses privacy concerns surrounding Meta smart glasses, new passkey-theft and MFA-bypass research, the…
more -
Iranian Cyberattacks on U.S. Water Systems - 2026-08-03
This episode examines Anthropic’s disclosure that Claude breached real organizations during security testing, along with new technical details about the OpenAI and Hugging Face incident. The discussion covers ExfilSquad’s claimed Microsoft breach, cyberattacks targeting U.S. water systems, and...
-
OpenAI accidentally Hacked Hugging Face - 2026-07-27
This week, the crew digs into one of the biggest AI security stories of the year: how an OpenAI autonomous agent accidentally compromised a Hugging Face environment during testing and what the incident reveals about the growing risks of agentic AI. They examine how AI models behave in offensive...
-
Initiative Gold Eagle - 2026-07-20
This week, the team discusses the White House's Initiative Gold Eagle and its implications for cybersecurity information sharing, an unexpectedly positive development involving Flock Safety, and the latest wave of AI news. The conversation also explores evolving AI model capabilities, security...
-
OnlyFans Models Are Accidental Blue Team Defenders - 2026-07-13
This week, the team unpacks a wide range of cybersecurity news, including a fraudulent offensive security startup tied to cybercriminals, how leaked OnlyFans content is inadvertently helping defenders identify compromised government websites, and new vishing attacks targeting Microsoft Entra...
-
Apple's Hide My Email ... Doesn't! – 2026-07-06
This episode of BHIS - Talkin' Bout [infosec] News covers the latest cybersecurity headlines, including debate over the economics of AI infrastructure, updates on the Huntress controversy, new details surrounding Scattered Spider, a critical Microsoft SharePoint vulnerability, and reports of a...
-
Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29
This week on BHIS - Talkin' Bout [infosec] News, the team discusses the Polymarket supply chain compromise that led to the theft of millions from a small number of high-value accounts, emerging phishing campaigns abusing OpenAI invitations and Microsoft 365 device code authentication, and recent...
-
Rickrolling the FIFA World Cup - 2026-06-22
This week’s episode covers a series of cybersecurity stories, including a researcher’s discovery of vulnerabilities in FIFA’s World Cup platform that could have enabled unauthorized administrative access and even the ability to alter live broadcasts. The team also discusses the risks of…
more -
U.S. Government Effectively Bans Fable 5 and Mythos 5 - 2026-06-15
This episode dives into the fallout from new restrictions on Anthropic’s cybersecurity-focused AI models, Mythos and Fable, and the debate over whether government pressure has effectively blocked security researchers from using advanced AI for vulnerability discovery and code analysis. The panel...
-
Breach Disclosure Lag is Worse Than Ever – 2026-06-08
This episode covers the rising costs and restrictions surrounding AI agents, including token consumption, model access policies, and the growing dependence on AI tools for security work. The hosts discuss Troy Hunt’s retrospective on Have I Been Pwned reaching its 1,000th tracked breach…
more -
Anti-Tech Extremism - 2026-06-01
This episode covers a Wired report on the rise of “anti-tech extremism” and growing public opposition to AI infrastructure projects, including debates over data centers, resource consumption, local communities, and government responses. The hosts also discuss AI coding assistants, model safety...
-
GitHub bans vindictive security researcher - 2026-05-26
This episode covers a CISA contractor’s accidental exposure of AWS GovCloud credentials and internal system details on GitHub, the FBI’s efforts to patch vulnerable routers, and a critical NGINX vulnerability with public proof-of-concept code. The team also discusses Microsoft’s handling of a...
-
Mythos finds a curl vulnerability - 2026-05-18
This episode covers Mythos uncovering a vulnerability in cURL, a recent Google Threat Intelligence report on a zero-day exploit, and the growing impact of AI on capture-the-flag competitions and bug bounty programs. The hosts also discuss the economics of AI platforms like OpenAI, security…
more -
The Canvas / Instructure Breach – 2026-05-11
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat…
more -
Utah Bans VPN Age Bypass - 2026-05-04
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat…
more -
NASA Gets Phished by Chinese - 2026-04-27
This episode dives into the economics and competitive dynamics of the AI industry, including discussions on profitability, pricing strategies, monopolization, and the rise of open and distilled models—particularly concerns around Chinese AI competition. The hosts also cover a reported…
more -
Tim Cook Announces Apple CEO Exit - 2026-04-20
This episode covers several major cybersecurity and tech news stories, including a supply chain–related breach at Vercel involving exposed environment variables and compromised third-party AI tooling. The hosts also discuss concerns around AI-driven data risks, including browser extensions and...
-
Anthropic’s Project Glasswing is an Infosec Turning Point – 2026-04-13
This episode dives into Anthropic’s “Project Glasswing” and the broader implications of AI-driven offensive security, including models autonomously discovering vulnerabilities and attempting sandbox escapes. The hosts discuss how agentic AI testing approaches could reshape vulnerability research,...
-
Artemis Astronaut's Bad Outlooks - 2026-04-06
This episode covers several major cybersecurity and tech news stories, including a sophisticated NPM supply chain attack that compromised the widely used Axios library through advanced social engineering, and the broader implications for software security. The hosts also discuss the accidental…
more -
FCC Blocks Foreign-Made Routers – 2026-03-30
This episode covers the FCC’s move to restrict or ban certain foreign-made networking equipment—especially routers tied to Chinese manufacturers—highlighting the potential cybersecurity risks, supply chain implications, and how the rule could affect ISPs and consumers. The hosts also discuss...
-
Pentagon Plans to Train AI With Classified Data – 2026-03-23
This episode covers a range of cybersecurity and AI-related news, including how Pokémon Go players may have unknowingly helped train delivery robots using massive image datasets. The hosts also discuss the Pentagon’s reported plans to train AI systems on classified data and the potential risks of...
-
Iranian Hackers Claim Responsibility for Stryker Attack - 2026-03-16
This episode covers multiple cybersecurity news stories, including Iranian hackers claiming responsibility for a cyberattack on Stryker, ongoing challenges in attributing nation-state cyber operations, and broader trends in global cyber conflict. The hosts also discuss the reliability of public...
-
A Nightmare of Vibeware - 2026-03-09
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat...
-
Pentagon Declares Anthropic a Supply Chain Risk — 2026-03-02
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat...
-
The Coming SAAS Apocalypse - 2026-02-23
In this episode: Agentic AI tools that can autonomously perform tasks like researching and booking flights, raising concerns about automated purchases, fraud, guardrails, and over-trust in AI systems. The idea of a coming “SaaS apocalypse,” where AI tools could replicate or replace many small…
more -
Palo Alto Fears China Retaliation – 2026-02-16
In this episode, the crew dives into reports that Palo Alto Networks allegedly avoided directly attributing a threat campaign to China over fears of retaliation—sparking a broader debate about corporate and government threat attribution, geopolitics, and whether attribution still matters in…
more -
Live From WWHF Mile High 2026 – 2026-02-11
Live from Wild West Hackin’ Fest Denver 2026, the Black Hills Information Security crew brings their signature mix of sharp security insight and off-the-cuff banter to a packed in-person audience. This episode centers on a controversial Notepad update that introduced Markdown rendering—along with…
more -
US Defense Chief Uploads Secret Into to ChatGTP - 2026-02-02
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat…
more -
TikTok's invasive Privacy Policy - 2026-01-26
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat In...
-
Chinese firms drop US and Israeli cybersecurity software - 2026-01-19
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat 🔗...
-
BreachForums Doomsday - 2026-01-12
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat 🔗...
-
US Cyberattacks on Venezuela - 2026-01-05
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat 🔗...
-
Hot Take Predictions for Next Year – 2025-12-15
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat 🔗...
-
A Live Stream From inside Lazarus Group – 2025-12-08
🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team....
-
Lawmakers Want to Ban VPNs - 2025-12-01
Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Chapters (00:00) - PreShow Banter™ — The Problem With Extensions (03:10) - Lawmakers Want to Ban VPNs – BHIS - Talkin' Bout [infosec] News 2025-12-01 (03:47) - Story # 1: Stop Putting Your Passwords Into Random...
-
Shai-Hulud malware leaks secrets on GitHub – 2025-11-24
Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Chapters (00:00) - PreShow Banter™ — Stressed about lithium batteries (04:59) - Shai-Hulud malware leaks secrets on GitHub – BHIS - Talkin' Bout [infosec] News 2025-11-24 (05:57) - Story # 1: Shai-Hulud malware...
-
A.I. Transcription Startup Was Just A Guy Taking Notes- 2025-11-17
Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00:00 - PreShow Banter™ — The Way the Community Rumbles 00:08:21 - A.I. Transcription Startup Was Just A Guy Taking Notes - BHIS - Talkin’ Bout [infosec] News 2025-11-17 00:09:01 - Story # 1: New data shows...
-
Louvre’s Video Security Password Was ‘Louvre’ 2025-11-10
Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com Chapters 00:00 - PreShow Banter™ — Humans are Done 03:04 - Louvre’s video security password was ‘Louvre’ – BHIS - Talkin’ Bout [infosec] News 2025-11-10 05:11 - Story # 1: I Tried the Robot That’s Coming to Live...
-
Ransomware Victims Stop Paying Hackers – 2025-11-03
Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00 - PreShow Banter™ — Musical Views of the Universe 04:05 - – BHIS - Talkin’ Bout [infosec] News 2025-11-03 04:39 - Story # 1: Ransomware profits drop as victims stop paying hackers 06:22 - Chart since 2019...
About this show
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. Join us live on YouTube, Monday's at 4:30PM ET.
Hosted by
Black Hills Information Security
Categories